CVE-2026-25288

Summary

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

Affected Software

VendorProductVersion RangeStatus
Qualcomm, Inc.SnapdragonCologneaffected
Qualcomm, Inc.SnapdragonCQ7790affected
Qualcomm, Inc.SnapdragonFastConnect 6900affected
Qualcomm, Inc.SnapdragonFastConnect 7800affected
Qualcomm, Inc.SnapdragonOrneaffected
Qualcomm, Inc.SnapdragonPalawan25affected
Qualcomm, Inc.SnapdragonPandeiroaffected
Qualcomm, Inc.SnapdragonQCM8838affected
Qualcomm, Inc.SnapdragonQLN1083BDaffected
Qualcomm, Inc.SnapdragonQLN1086BDaffected
Qualcomm, Inc.SnapdragonQMB715affected
Qualcomm, Inc.SnapdragonQMP1000affected
Qualcomm, Inc.SnapdragonQPA1083BDaffected
Qualcomm, Inc.SnapdragonQPA1086BDaffected
Qualcomm, Inc.SnapdragonQXM1093affected
Qualcomm, Inc.SnapdragonQXM1094affected
Qualcomm, Inc.SnapdragonQXM1095affected
Qualcomm, Inc.SnapdragonQXM1096affected
Qualcomm, Inc.SnapdragonSC8380XPaffected
Qualcomm, Inc.SnapdragonSDR753affected
Qualcomm, Inc.SnapdragonSnapdragon 7 Gen 4 Mobile Platformaffected
Qualcomm, Inc.SnapdragonSnapdragon 8 Elite Gen 5affected
Qualcomm, Inc.SnapdragonWCD9378affected
Qualcomm, Inc.SnapdragonWCD9378Caffected
Qualcomm, Inc.SnapdragonWCD9380affected
Qualcomm, Inc.SnapdragonWCD9385affected
Qualcomm, Inc.SnapdragonWCD9395affected
Qualcomm, Inc.SnapdragonWCN6755affected
Qualcomm, Inc.SnapdragonWCN7860affected
Qualcomm, Inc.SnapdragonWCN7861affected
Qualcomm, Inc.SnapdragonWSA8840affected
Qualcomm, Inc.SnapdragonWSA8845affected
Qualcomm, Inc.SnapdragonWSA8845Haffected
Qualcomm, Inc.SnapdragonX2000077affected
Qualcomm, Inc.SnapdragonX2000086affected
Qualcomm, Inc.SnapdragonX2000090affected
Qualcomm, Inc.SnapdragonX2000092affected
Qualcomm, Inc.SnapdragonX2000094affected
Qualcomm, Inc.SnapdragonXG101002affected
Qualcomm, Inc.SnapdragonXG101032affected
Qualcomm, Inc.SnapdragonXG101039affected
Qualcomm, Inc.SnapdragonXRV7209affected
Qualcomm, Inc.SnapdragonXRV9209affected

Weaknesses

  • CWE-126: CWE-126 Buffer Over-read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References